Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File:                     ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier:          bePzjS8gWbILfjuB6pDFBaYeTgAyi8jxr7mI4kcAuGU=
Subject key identifier:   6E:9F:6A:BC:52:A1:42:51:63:1C:BC:46:18:EC:58:1B:9D:41:99:D0
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer:       /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial:       0193568AADE9CC53AB548CDFAD68F4238D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number:          07D7
Signing time:             Sat 23 Nov 2024 01:02:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:29 +0000
Files and hashes:         1: CCA4X8RzjhfRd95S6rz5UOYIcsw.roa (hash: tvOYFmsiGEWN6FfsB29DLOoxHIRFfqHX/cIOTM2HsOU=)
                          2: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: cu+4qnPmsLy6Pab59kMlu7hHxZAZ49x6NQeuUvrO4UY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:ad:e9:cc:53:ab:54:8c:df:ad:68:f4:23:8d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
        Validity
            Not Before: Nov 23 01:02:29 2024 GMT
            Not After : Nov 24 01:02:29 2024 GMT
        Subject: CN=6e9f6abc52a14251631cbc4618ec581b9d4199d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:6a:1d:6e:5e:69:8d:87:52:8a:af:51:cf:
                    a4:28:fe:ad:b7:7d:bc:17:ab:86:bf:54:75:99:d0:
                    f5:fd:a9:35:c0:8f:71:3b:e8:28:dd:8d:4f:78:d0:
                    37:97:d8:0f:79:cd:8f:fe:b9:40:56:23:94:bb:15:
                    bf:d2:15:1f:fd:00:ea:cb:ba:fc:80:2b:3b:06:02:
                    6e:b7:15:d3:b6:58:ea:6b:80:5d:92:a1:d7:60:94:
                    8c:4d:94:79:88:da:c0:97:2c:ca:35:3b:0c:7c:80:
                    f4:ea:d7:2f:78:3b:3a:d3:69:87:c6:dd:71:b8:14:
                    73:b8:69:f1:74:1d:1b:e0:e5:83:68:af:7d:99:aa:
                    ce:ed:e3:12:1d:a9:e6:57:7c:cc:d8:42:05:ad:43:
                    d0:59:5c:e0:29:17:50:c0:cc:c6:a5:90:03:d7:bd:
                    53:c6:d4:bb:9f:5a:87:88:ec:29:eb:fc:df:d4:71:
                    4e:69:21:01:a4:f0:0a:9a:65:90:44:75:b8:9a:f3:
                    89:19:ac:df:ef:6d:97:ad:65:3f:65:bd:4b:79:30:
                    ad:dc:7b:2b:90:2d:ed:c2:bb:31:a7:8f:12:70:e0:
                    07:b9:4b:9c:a4:ec:0d:aa:ea:31:55:3c:db:36:8e:
                    f3:df:ed:0a:c4:81:cc:ca:15:3a:75:fb:2e:5b:f3:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:6A:BC:52:A1:42:51:63:1C:BC:46:18:EC:58:1B:9D:41:99:D0
            X509v3 Authority Key Identifier:
                keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:bd:b4:ac:26:0e:74:9e:27:b4:f6:23:c5:a1:a3:08:54:
         c4:3c:af:5e:58:16:7f:8a:9c:c8:cd:c2:2f:2f:78:cd:bf:cb:
         97:f1:74:43:f9:92:fb:ea:be:d3:90:b8:6b:d1:5b:5a:f3:c8:
         3f:ef:97:df:2f:9a:73:d7:11:31:f3:2d:f4:80:26:4a:e1:52:
         bc:c4:6e:cf:71:7f:de:75:c8:13:d3:69:c8:1c:d1:4f:74:26:
         ed:f5:a4:59:c5:64:5f:20:85:60:34:0b:1e:e1:23:77:f7:e5:
         80:fa:8b:61:e4:38:a1:f4:7c:7f:45:3f:85:26:0d:55:08:e8:
         80:27:fe:8a:5e:44:9f:1a:60:89:52:af:e3:86:52:50:42:95:
         e5:30:71:45:5f:90:5d:a8:9f:74:f9:88:f1:13:c1:2f:b8:ef:
         fa:59:66:28:92:0c:f0:8c:c0:1f:01:0e:de:df:e2:07:64:b3:
         56:7a:f2:0f:65:1f:24:fa:19:93:c4:aa:57:e5:da:33:65:ac:
         67:85:ea:5f:83:b3:92:5b:7c:e4:c7:31:8e:97:b2:5f:2f:80:
         3d:c5:3f:e9:df:a9:32:b1:d9:a0:18:f6:f5:f6:a7:ef:94:12:
         48:d6:4d:cb:d0:26:ee:b5:7f:a1:f6:6d:ad:ea:b7:c7:f7:45:
         ab:d9:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:26 2024 by rpki-client on console-fra.rpki-client.org